CVE-2024-7634

CVE-2024-7634 is a medium-severity vulnerability affecting NGINX Agent and NGINX Instance Manager, where a highly privileged attacker can bypass the "config_dirs" restriction to write or overwrite files outside of intended secure directories. The vulnerability has a CVSS score of 4.9, indicating a network attack vector with low complexity, requiring high privileges, and leading to high integrity impact without affecting confidentiality or availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.